cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
622
Views
2
Helpful
15
Replies

WEBconsole Radius Authentication

kristiqirjako99
Level 1
Level 1

Hello,

I am having a problem with radius authentication on the web console. The connect with radius is OK, i can see the request which is accepted from the radius side, where i do prv-lvl=15, but at the webpage it just reloads and rerequires again the authentication, so I am not able to login. 

It looks like something is missing in the reply from RADIUS.Screenshot 2024-02-12 154255.pngScreenshot 2024-02-12 154358.png

15 Replies 15

balaji.bandi
Hall of Fame
Hall of Fame

Try different browser.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

The problem persists. If I turn off the radius authentification, and I keep it locally authenticated, all works fine

Cheers  that browser is ok, what Radius ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

ClearPassScreenshot 2024-02-12 160952.png

apoliogies, i would have asked this in the first instance, what Device mode and IOS code running on the device.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

It is GUI of WLC wat you want to auth via radius?

MHM

GUI

Sorry dont get your answer' it GUI of WLC ?

MHM

Sorry, it is the GUI of a cisco switch 

Ok' can I see how you config the SW.

MHM

These are the configurations regarding the HTTP Radius

aaa group server radius ADMIN-RAD-SERVERS
server name cppma
server name cppmb
deadtime 15
!
!/ Authorization list Radius local /!
aaa authentication login default group ADMIN-RAD-SERVERS local
aaa authorization console
aaa authorization config-commands
aaa authorization exec default group ADMIN-RAD-SERVERS local

ip http authentication aaa login-authentication default
ip http authentication aaa exec-authorization default
!/ Enable https server /!
ip http secure-server
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
ip scp server enable
!

ip http authentication aaa

Then re add

ip http authentication aaa login-authentication default
ip http authentication aaa exec-authorization default

MHM

Nope, the problem persists. I can see the request in RADIUS, and also the privilege level is given, but there may be something missing from the Radius reply i think.

Debug aaa authorization <- share this if @Aref Alsouqi suggested not work for you.

MHM

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: